911960 - September 2013 batch of root CA changes

Status: RESOLVED FIXED

(NSS :: CA Certificates Code, task, P1)

Description

[Kai Engert (:KaiE:)]

September 2013 batch of root CA changes.

See dependency list.

Comment 1

[Kai Engert (:KaiE:)]

Attachment: patch v1

There was only one root labeled Wells Fargo, I removed that one - but I haven't checked the fingerprint matches. Please check in the test build that I've removed the correct one.

Here are the commands I used for adding the new roots:

addbuiltin -n "SG TRUST SERVICES RACINE" -t ,C, < ~/moz/nss/hg/root1308/sgtrust-860929.der >> certdata.txt
addbuiltin -n "ACCVRAIZ1" -t C,C,C < ~/moz/nss/hg/root1308/acc-872279.der >> certdata.txt
addbuiltin -n "TWCA Global Root CA" -t C,C,C < ~/moz/nss/hg/root1308/twca-901605.der >> certdata.txt

Comment 2

[Kai Engert (:KaiE:)]

https://tbpl.mozilla.org/?tree=Try&rev=e82a03006a30

Comment 3

[Kathleen Wilson]

(In reply to Kai Engert (:kaie) from comment #1)
> There was only one root labeled Wells Fargo, I removed that one - but I
> haven't checked the fingerprint matches. Please check in the test build that
> I've removed the correct one.

I have installed the test build and confirm that the correct Wells Fargo root cert was removed. And, as expected, the WellsSecure root cert is still included with the websites trust bit set.

Comment 4

[Kathleen Wilson]

The CAs and I have tested the changes, and confirm that they are as expected.

Thanks!

Comment 5

[Kai Engert (:KaiE:)]

Comment on attachment 798821 [details] [diff] [review]
patch v1

Since all changes have been confirmed to work correctly, I'm requesting review/approval of the patch from Bob.

Comment 6

[Kai Engert (:KaiE:)]

changing target milestone to 3.15.4

Comment 7

[Robert Relyea]

Comment on attachment 798821 [details] [diff] [review]
patch v1

r+ rrelyea

Comment 8

[Kai Engert (:KaiE:)]

Thanks, Bob!

I'll check this in tomorrow, after our buildbot is done with my manual testing series.

Comment 9

[Kai Engert (:KaiE:)]

finally! :)
https://hg.mozilla.org/projects/nss/rev/750f31b18821